Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/f86cd9d2-0ae0-32c5-94fa-c3878d115f1c.roa
File:                     f86cd9d2-0ae0-32c5-94fa-c3878d115f1c.roa (raw, json)
Hash identifier:          JMHOXBkhY3aFUSTACvNxY6U0SGXikymLLZRo9Im9WkY=
Subject key identifier:   FF:83:63:B4:F0:6F:F3:94:E6:97:C5:3F:02:AD:AD:30:25:55:E8:78
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F43285847F2BA30C4326AEE36BD040640
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/f86cd9d2-0ae0-32c5-94fa-c3878d115f1c.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     53407
IP address blocks:        69.162.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:30:c4:32:6a:ee:36:bd:04:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=392f98b6-2cf7-4f57-87b2-ff74491869ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b7:86:ec:bc:1f:c9:8d:d6:b0:21:51:84:c9:
                    e6:50:df:95:61:46:38:50:8d:25:5d:0c:20:93:a8:
                    2a:a7:36:f3:9a:08:4e:e7:1b:c6:5d:45:32:7d:f9:
                    01:49:a7:c7:50:ba:28:dc:54:da:06:35:a3:02:a7:
                    6e:e8:73:6b:10:b0:3a:46:af:0f:7d:c6:40:3f:fd:
                    1b:4d:1b:16:df:a3:f8:ef:f6:ac:3c:f0:fd:cf:4f:
                    02:a4:32:9a:11:b5:e2:4f:79:9a:8f:d9:41:ec:94:
                    ca:a1:04:77:8e:f7:0c:32:f9:e4:aa:4a:91:41:1a:
                    50:43:ca:10:8b:e9:df:e5:7e:38:8e:e4:fa:53:c2:
                    65:81:10:1d:37:26:41:58:2c:d4:8c:50:b2:91:f9:
                    28:a4:ee:e4:18:15:f2:80:aa:c4:d4:c8:55:84:61:
                    cf:72:72:19:cd:6b:56:fa:24:9d:d6:42:2e:01:80:
                    12:a3:2a:8b:1e:56:19:d6:5c:56:df:01:5f:5a:60:
                    e2:29:69:6f:b7:fd:56:46:97:27:13:5b:47:d2:e3:
                    e6:90:d6:a3:d1:31:5e:8d:16:9d:51:56:4c:00:e7:
                    80:47:fd:b9:95:28:b0:8f:bb:14:10:b0:4d:16:fa:
                    dd:19:8d:a0:0f:67:27:c2:f1:33:68:3f:d5:45:f7:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:63:B4:F0:6F:F3:94:E6:97:C5:3F:02:AD:AD:30:25:55:E8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/f86cd9d2-0ae0-32c5-94fa-c3878d115f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.162.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:cf:58:02:ed:5d:11:11:3d:d0:34:77:9d:9e:7b:6b:c4:
         6c:6d:58:5a:b3:b5:3e:4f:47:04:02:80:4a:67:6c:3b:f7:92:
         82:99:db:f8:28:34:d1:37:2a:93:49:ca:22:a4:75:0d:6a:12:
         ea:ce:2f:a8:71:1e:f5:6c:30:b1:02:85:54:ad:5e:06:f8:91:
         99:d6:9e:fd:01:ad:9e:6c:03:85:69:c4:c8:40:95:24:f0:05:
         4e:ab:ba:4b:e4:90:f1:c4:49:fa:f3:fd:ce:4a:4b:5f:72:ea:
         1e:30:4e:d0:2d:66:1e:9d:0f:5b:71:31:1c:9d:25:64:c9:ac:
         35:fa:a8:37:f5:26:f0:5d:99:c1:72:68:75:c0:f7:a0:05:63:
         98:78:2f:bf:0a:9c:47:28:8a:0a:0a:3d:4d:3a:e3:d2:a7:b5:
         c4:3e:ba:6a:ef:c6:50:3e:7a:51:df:53:57:b6:5c:75:f9:c8:
         23:17:e6:bc:d1:82:56:f3:94:3a:bb:26:bd:7d:8d:5a:6d:96:
         ce:2c:58:27:a3:e3:17:b3:34:9d:c2:bb:90:0d:9b:16:35:ed:
         ed:39:15:68:12:ac:6a:71:73:94:38:b9:96:f7:2a:65:89:ce:
         f3:ce:b2:e9:a7:b3:63:ff:a3:db:83:c0:f7:e2:99:5e:d9:98:
         e0:30:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org